Skip to content

build(deps): bump the go-minor-and-patch group across 1 directory with 6 updates#64

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-779cca9ab0
Open

build(deps): bump the go-minor-and-patch group across 1 directory with 6 updates#64
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-779cca9ab0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026 •
edited
Loading

Bumps the go-minor-and-patch group with 5 updates in the / directory:

Package From To
github.com/hashicorp/go-plugin 1.7.0 1.8.0
github.com/pb33f/libopenapi 0.36.1 0.36.3
github.com/pb33f/libopenapi-validator 0.13.4 0.13.7
golang.org/x/crypto 0.48.0 0.50.0
google.golang.org/protobuf 1.36.6 1.36.11

Updates github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/hashicorp/go-plugin's releases.

v1.8.0

What’s Changed

Compliance & Maintenance

  • updated copyright and license headers
  • Modernized build tags
  • Multiple GitHub Actions and dependency bumps

Fixes & Improvements

  • Fixed concurrency issue with pipesWaitGroup
  • Prevented pidfd leak in cmdrunner
  • Reduced logging configuration noise

Enhancements

  • Updated go_package to full path in proto
  • Improved gRPC example (plugin selection + encoding fix)
  • Added gRPC streaming example

Dependencies Upgrade

  • Upgraded protobuf
  • Several CI/CD action updates

New Contributors

Commits
  • 155dcdd cmdrunner: release process handle in _pidAlive to avoid pidfd leak (#378)
  • 96d18ee [chore] : Bump actions/upload-artifact in the actions group (#376)
  • a0c251c [chore] : Bump actions/setup-go from 6.3.0 to 6.4.0 in the actions group (#375)
  • 6a56553 [chore] : Bump the actions group with 2 updates (#373)
  • abeb978 Bump protobuf from 4.25.8 to 5.29.6 in /examples/grpc/plugin-python (#372)
  • a4c9002 examples: Add gRPC streaming example (#339)
  • 0ac49e2 [chore] : Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group (#370)
  • d662936 logging: lower priority of configuring messages (#311)
  • c57bf64 [chore] : Bump actions/setup-go from 6.1.0 to 6.2.0 in the actions group (#369)
  • a33e454 chore: add plugin selection and fix encoding in gRPC example (#368)
  • Additional commits viewable in compare view

Updates github.com/pb33f/libopenapi from 0.36.1 to 0.36.3

Release notes

Sourced from github.com/pb33f/libopenapi's releases.

v0.36.3

Fixes

v0.36.2

Addresses #565

Commits

Updates github.com/pb33f/libopenapi-validator from 0.13.4 to 0.13.7

Release notes

Sourced from github.com/pb33f/libopenapi-validator's releases.

v0.13.7

Fixes a few issues.

v0.13.6

Fixes issues #83 (an oldie!)

v0.13.5

Addresses

@​vmarceau

Commits
  • f95f219 Address #243
  • 1588f3f Address #236
  • f01d03f Address issue #258
  • ae3b0dd bump coverage and lint.
  • 1e894f6 Address issue #83
  • 87d0ff6 Bump github.com/dlclark/regexp2 from 1.11.5 to 1.12.0
  • 1f22ad6 fix: GetRenderedSchema renders in validation mode on cache miss
  • a3056e6 fix: GetRenderedSchema returns YAML in all cases
  • 7f1fda7 fix: parameter validation populates complete cache entry
  • 7ba6c44 perf: use cached rendered schemas for error messages in parameter validation
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.48.0 to 0.50.0

Commits
  • 03ca0dc go.mod: update golang.org/x dependencies
  • 8400f4a ssh: respect signer's algorithm preference in pickSignatureAlgorithm
  • 81c6cb3 ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength
  • 982eaa6 go.mod: update golang.org/x dependencies
  • 159944f ssh,acme: clean up tautological/impossible nil conditions
  • a408498 acme: only require prompt if server has terms of service
  • cab0f71 all: upgrade go directive to at least 1.25.0 [generated]
  • 2f26647 x509roots/fallback: update bundle
  • See full diff in compare view

Updates google.golang.org/protobuf from 1.36.6 to 1.36.11

Updates golang.org/x/net from 0.50.0 to 0.52.0

Commits
  • 316e20c go.mod: update golang.org/x dependencies
  • 9767a42 internal/http3: add support for plugging into net/http
  • 4a81284 http2: update docs to disrecommend this package
  • dec6603 dns/dnsmessage: reject too large of names early during unpack
  • 8afa12f http2: deprecate write schedulers
  • 38019a2 http2: add missing copyright header to export_test.go
  • 039b87f internal/http3: return error when Write is used after status 304 is set
  • 6267c6c internal/http3: add HTTP 103 Early Hints support to ClientConn
  • 591bdf3 internal/http3: add HTTP 103 Early Hints support to Server
  • 1faa6d8 internal/http3: avoid potential race when aborting RoundTrip
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the go-minor-and-patch group across 1 directory wit…
c4a278a 
…h 6 updates

Bumps the go-minor-and-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/hashicorp/go-plugin](https://github.com/hashicorp/go-plugin) | `1.7.0` | `1.8.0` |
| [github.com/pb33f/libopenapi](https://github.com/pb33f/libopenapi) | `0.36.1` | `0.36.3` |
| [github.com/pb33f/libopenapi-validator](https://github.com/pb33f/libopenapi-validator) | `0.13.4` | `0.13.7` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.48.0` | `0.50.0` |
| google.golang.org/protobuf | `1.36.6` | `1.36.11` |



Updates `github.com/hashicorp/go-plugin` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/hashicorp/go-plugin/releases)
- [Changelog](https://github.com/hashicorp/go-plugin/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-plugin@v1.7.0...v1.8.0)

Updates `github.com/pb33f/libopenapi` from 0.36.1 to 0.36.3
- [Release notes](https://github.com/pb33f/libopenapi/releases)
- [Commits](pb33f/libopenapi@v0.36.1...v0.36.3)

Updates `github.com/pb33f/libopenapi-validator` from 0.13.4 to 0.13.7
- [Release notes](https://github.com/pb33f/libopenapi-validator/releases)
- [Commits](pb33f/libopenapi-validator@v0.13.4...v0.13.7)

Updates `golang.org/x/crypto` from 0.48.0 to 0.50.0
- [Commits](golang/crypto@v0.48.0...v0.50.0)

Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.11

Updates `golang.org/x/net` from 0.50.0 to 0.52.0
- [Commits](golang/net@v0.50.0...v0.52.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-plugin
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/pb33f/libopenapi
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/pb33f/libopenapi-validator
  dependency-version: 0.13.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/net
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants